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DETAILED ACTION 

Priority 

1 . Acknowledgement is made of applicant's priority claim over application 
02142879.4 filed in China on 09/23/2002. 

Claim Rejections - 35 USC § 102 

2. The following is a quotation of the appropriate paragraphs of 35 U.S.C. 1 02 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

3. Claims 1, 2, 9, 10, 17 and 22-33 are rejected under 35 U.S.C. 102(b) as being 
anticipated by Simmons et al. (hereinafter 'Simmons', Corrected Pub. No. 
2006/0085821). 

Regarding claims 1 , 9, 17 and 22-33, Simmons teaches a Video-on-Demand 
system (with respective method and computer readable medium) for demanding a video 
program via a short message, comprising: 

short message generating means for receiving a user demand (User interface 
54, Fig. 2; [0040] lines 1-8), and generating a demand short message based on the 
user demand, said demand short message including at least a User Identifier field, a 
Program Identifier field of the demanded video program and an Authentication field 
([0017]; [0040] lines 1-15; [0044] lines 22-[0045]; [0052]) ; 
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short message sending means for sending the demand short message 
generated by the short message generating means (Network connectivity 12, Fig.2; ; 

demand short message processing means (Transaction server 10, Fig. 1) at a 
program delivering end for receiving the demand short message, processing the 
received demand short message to extract the user identifier and using the 
Authentication field to authenticate the legality of the user, and sending the program 
identifier of the demanded program by a legal user to video delivering means ([0040]; 
[0044]; [0045]); 

video delivering means (Content Providers 6, Fig. 1) for sending program 
content corresponding to the program identifier from the program delivering end to the 
user end indicated by a legal user identifier ([0040]- [0045]); and 

program playing means at the user end for receiving the video program sent by 
the video delivering means and playing it back to the user (42, Fig. 2). 

Regarding claims 2 and 10, Simmons teaches a Video-on-Demand further 
comprising the step of sending from the program delivering end to the user end a reply 
message including a confirmation message indicating that the demand short message 
has been received (The user knows that his request was received when he/she 
receives the files, [0044] lines 32-37; or when the PIN is sent, which can be sent 
with the request [0052], a message is sent if it is not verified, [0049]). 
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Claim Rejections - 35 USC § 103 

4. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 

obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

5. Claims 3, 11 and 18 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Simmons et al. (hereinafter 'Simmons', Corrected Pub. No. 2006/0085821) in view 
of NPL document "Introduction to SSL". 

Regarding claims 3, 11 and 18, Simmons teaches all the limitations of the claim it 
depends on. On the other hand, although Simmons teaches that secure socket layer 
(SSL) can be implemented, he does not teach the details of the implementation of the 
security implementation and the encryption of the content. 

However, in an analogous art, the article "Introduction to SSL" teaches that when 
communication between server and user is to be established, authentication certificates 
along with other information to first authenticate each other and share keys and once 
authentication is performed encryption and decryption of the content is performed with 
the shared keys (page 1 and 2, paragraphs 7 and 8; paragraph 21 numerals 1-10). 
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Therefore, it would have been obvious to an ordinary skilled in the art at the time 
of the invention to modify Simmons's system to include SSL as a security measure as 
taught by NPL document, for authenticated and encrypted communication between 
clients and servers ("Introduction to SSL", paragraph 1). 

6. Claims 4- 8, 12-16 and 19-21 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Simmons et al. (hereinafter 'Simmons', Corrected Pub. No. 
2006/0085821) in view of NPL document "Introduction to SSL" in further view of 
Needham et al. (hereinafter 'Needham', Pub. No. 2003/0177495). 

Regarding claims 4,12 and 19, Simmons teaches all the limitations of the claims 
they depend on. Simmons also teaches a video-on-demand system further comprising 
an optional field containing optional data that may describe said demand more precisely 
(Title and/or code can be transmitted, [0050] and [0052]). On the other hand, does 
not explicitly teach having a video-on-demand wherein said demand message further 
comprises: 

a Format Identifier field for defining a format of said demand short message; 

a Demand Time field for indicating a time for sending said demand; 

a Playback Time field for indicating a start time of video playing; and 

said Authentication field is an encrypted digest of the above User Identifier field, 
Program Identifier field, Format Identifier field, Demand Time field, Playback Time field, 
and Optional field. 
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However, in an analogous art, Needham teaches a video-on-demand system in 
which the user is able to select the time of download and further playback ([0020]). 

Therefore, it would have been obvious to an ordinary skilled in the art at the time 
of the invention to have modified Simmons' invention with Needham's selection of the 
time of download and playback for the benefit of finding a time of the day where more 
bandwidth and processing power is available (Needham, [0020]). 

As stated above, the combined teachings of Simmons and Needham teach all 
the limitations discussed above. On the other hand, they do not explicitly teach having 
the system further comprising a Format identifier for defining a format of said demand 
short message and that said Authentication field is an encrypted digest of the above 
User Identifier, Program Identifier, Format Identifier field, Demand Time field, Playback 
Time field and Optional field. 

However, in an analogous art, the article "Introduction to SSL" teaches that a 
format or ciphers to be used are established between client and server for 
communicating between them (page 6, numerals 1-3). In addition, the article teaches 
that for giving more security while transmitting, all data transmitted is encrypted using 
different level of ciphers such as MD5, which creates a digest of the message (all fields 
transmitted) (pages 2 and 3, paragraphs 1 1 and 12; or table 1 listing all the ciphers that 
support key exchange). 

Therefore, it would have been obvious to an ordinary skilled in the art at the time 
of the invention to have modified Simmons and Needham's invention with the teachings 
on the "Introduction to SSL" article for the benefit of having a security measure for 
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authenticated and encrypted communication between clients and servers ("Introduction 
to SSL", paragraph 1). 

Regarding claims 5, 13 and 20, the combined teachings of Simmons, Needham 
and the teachings of the article "Introduction to SSL" teach a Video-on-Demand system 
(with respective method and computer readable medium) wherein said Authentication 
field is generated according to the following procedure: 

Calculating the digest of all the fields except the Authentication field using a 
digest algorithm ("Introduction to SSL": The MD5 algorithm calculates a digest of 
the message (page 2 paragraph 11) excepting the Authentication field which is an 
encrypted result of said digest, as per claim 4); 
/ encrypting with a cipher algorithm a calculated digest by adopting a secret 

authentication key corresponding to a user end device, uniquely allocated in 
advance by the program delivering end ("Introduction to SSL": Table 1 lists all the 
ciphers or algorithms that support key exchange. The process of exchanging the 
keys between server and client is explained in page 6 numerals 1-10. In other 
words, before sending or transmitting anything a set of keys and ciphers are 
established and all messages are encrypted with them, as for example the digest 
of the message); and 

a process of authenticating a user's legality by the program delivering end being 
conducted according to the following procedures: 
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calculating the digest of all the fields except the Authentication field using 
a digest algorithm; encrypting with a cipher algorithm the calculated digest by 
adopting a secret authentication key corresponding to a user end device, 
uniquely allocated in advance by the program delivering end, so as to calculate 
an Authentication field; and checking whether the calculated Authentication field 
and the received. (It is well known that the MD5 algorithm provides a way for 
verifying transmitted data and for "compressing" data before being 
encrypted with a private key -as a matter of example, see attached "MD5- 
Digest Algorithm" document. Therefore, after decrypting the message 
using the keys exchanged between client and server as described above, it 
is inherent that the server has to calculate a digest of the transmitted data 
in order to compare it with the received digest received from the client). 

Regarding claims 6 and 14, the combined teachings of Simmons, Needham and 
the teachings of the article "Introduction to SSL" teach a Video-on-Demand system (with 
respective method and computer readable medium), wherein when said video program 
is sent via a conditional access system, a content key is delivered with the video 
program, so there is no need for a separate deliver of said reply message (Simmons: 
[0040], [0045] and [0048]). 

Regarding claims 7, 8, 15 and 16, the combined teachings of Simmons, 
Needham and the teachings of the article "Introduction to SSL" teach a Video-on- 
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Demand system (with respective method and computer readable medium) wherein 
when the video program 

demanded by the user needs to be encrypted and the encrypt key is not sent via a 
conditional access system, the method further comprising the steps of: 

generating, at the program delivering end, an encrypted reply message 
containing a content key of said video program, and sending it to the user end 
decrypting, at the user end, the content key from said encrypted reply message; and 
(When establishing communication with the server, and after sending the client 
information for authentication, a key from the server is sent to the server to 
decrypt all the information sent from the server: "Introduction to SSL", page 6 
numerals 6-10); 

decrypting the video program received from the program delivering end 
according to the decrypted content key (Simmons, [0040], [0045] and [0052]). 

Regarding claim 21 , the combined teachings of Simmons, Needham and 
the teachings of the article "Introduction to SSL" teach a Video-on-Demand system (with 
respective method and computer readable medium) a short message generating means 
according to claim 20, wherein said digest algorithm is MD5 algorithm, and said cipher 
algorithm is 3DES algorithm ("Introduction to SSL", pages 2 and 3, paragraphs 11 
and 12; or table 1 listing all the ciphers that use support key exchange). 
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Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Omar Parra whose telephone number is 571-270-1449. 
The examiner can normally be reached on Under Academy Schedule. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Christopher Grant can be reached on 571-272-7294. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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